July's Security Bulletin From Microsoft Fixes 'Critical' Flaws - InformationWeek
IoT
IoT
Software // Enterprise Applications
News
7/13/2004
05:55 PM
50%
50%
RELATED EVENTS
Moving UEBA Beyond the Ground Floor
Sep 20, 2017
This webinar will provide the details you need about UEBA so you can make the decisions on how bes ...Read More>>

July's Security Bulletin From Microsoft Fixes 'Critical' Flaws

The holes affect various Microsoft operating system versions and apps ranging from Internet Explorer 6 SP1 to Windows Server 2003 Gold.

Microsoft on Tuesday released seven bulletins for security problems in Microsoft software that it assessed as "moderate" or "critical." Critical is the software maker's highest security rank. The designation often means the flaw can be exploited by remote attackers and could even be a target for a Sasser-style worm.

The flaws affect various Microsoft operating system versions and apps ranging from Internet Explorer 6 Service Pack 1 to Windows Server 2003 Gold.

Microsoft Security Bulletin MS04-023 addresses critical vulnerabilities within HTML Help. According to the bulletin, an attacker who exploited the most serious of these vulnerabilities could take complete control over an unpatched system. "We recommend that customers apply the update immediately," the bulletin warns.

Another patch that's part of bulletin MS04-022 addresses an unchecked buffer, or buffer overflow, error found within Microsoft Task Scheduler. According to Microsoft, it's possible for an attacker to gain complete control over a vulnerable system, including the ability to delete data and create new user accounts with full-access privileges.

More information about the vulnerabilities published today is available here.

Microsoft plans a Webcast Wednesday afternoon designed to help customers deploy July's security patches.

This month's scheduled patches came the same day the company revised its release date for a new patch-management tool, Windows Update Services. Windows Update Services, or WUS, is now due the first half of next year.

In an E-mailed response to questions regarding the delay, a Microsoft spokeswoman said that incorporating user feedback from WUS beta users is part of the delay. Also, Microsoft is developing a new automatic-update agent in Windows XP Service Pack 2 next month.

Comment  | 
Print  | 
More Insights
Comments
Threaded  |  Newest First  |  Oldest First
[Interop ITX 2017] State Of DevOps Report
[Interop ITX 2017] State Of DevOps Report
The DevOps movement brings application development and infrastructure operations together to increase efficiency and deploy applications more quickly. But embracing DevOps means making significant cultural, organizational, and technological changes. This research report will examine how and why IT organizations are adopting DevOps methodologies, the effects on their staff and processes, and the tools they are utilizing for the best results.
Register for InformationWeek Newsletters
White Papers
Current Issue
IT Strategies to Conquer the Cloud
Chances are your organization is adopting cloud computing in one way or another -- or in multiple ways. Understanding the skills you need and how cloud affects IT operations and networking will help you adapt.
Video
Slideshows
Twitter Feed
Sponsored Live Streaming Video
Everything You've Been Told About Mobility Is Wrong
Attend this video symposium with Sean Wisdom, Global Director of Mobility Solutions, and learn about how you can harness powerful new products to mobilize your business potential.
Flash Poll